Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          ABJ6e3Q8kplCKS8e2PG3acX9Tu7GUOlKAm1gx+ro+CM=
Subject key identifier:   94:F8:9E:B7:83:70:44:40:A1:F8:C2:A8:4C:B8:0D:41:CE:D3:92:3A
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       59D9596A74EED78F29ECD58631F049A64A2CCC24
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:22 +0000
ROA not before:           Thu 04 Apr 2024 03:47:22 +0000
ROA not after:            Thu 03 Apr 2025 03:52:22 +0000
asID:                     265181
IP address blocks:        2804:2bdc:20b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d9:59:6a:74:ee:d7:8f:29:ec:d5:86:31:f0:49:a6:4a:2c:cc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:22 2024 GMT
            Not After : Apr  3 03:52:22 2025 GMT
        Subject: CN=94F89EB783704440A1F8C2A84CB80D41CED3923A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:23:f9:19:a2:98:65:bb:57:5a:5d:ad:a8:
                    69:bb:c1:48:c0:e8:45:80:3b:e2:91:fd:66:7b:98:
                    65:f0:83:ee:97:be:cb:a7:12:8c:1b:1a:b6:2f:de:
                    38:00:be:43:eb:fa:60:3a:d4:7a:4a:ad:fd:11:6c:
                    58:f4:52:b7:cf:e0:ae:12:ed:02:e2:17:a3:78:7b:
                    e3:13:bd:ae:26:6d:8f:78:f5:fb:38:f8:73:d7:82:
                    1a:c1:05:44:af:84:01:fc:55:6d:65:05:71:96:4d:
                    f5:15:16:b7:b3:26:84:73:e3:56:f0:b0:21:86:80:
                    f7:da:88:1b:24:bc:c3:8f:da:32:dd:e6:ff:ad:57:
                    13:bc:03:8a:f7:c5:30:48:19:c9:51:a2:c0:3f:74:
                    6a:9e:5a:14:da:5e:79:42:27:1d:92:b9:6b:23:72:
                    66:3f:f7:fb:f8:f0:82:ef:3d:0e:b2:1d:06:39:df:
                    82:5b:c1:37:ea:d6:5b:8e:f2:df:ff:42:a4:a1:f7:
                    6e:b1:8d:96:d8:4f:22:6d:ac:57:f2:0d:bc:95:7b:
                    f9:6e:fd:cf:86:13:ee:7d:b8:94:4b:d0:b8:4a:d1:
                    ba:3a:b3:46:1a:0f:6a:bb:de:5a:1e:c2:6b:8f:b0:
                    13:63:8b:7f:84:04:2d:46:37:86:a1:e2:2d:64:20:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:9E:B7:83:70:44:40:A1:F8:C2:A8:4C:B8:0D:41:CE:D3:92:3A
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230623a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:20b::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:01:36:b3:5f:24:9c:15:e6:a2:17:5c:c1:9d:f1:1c:19:
         45:01:6f:61:59:ab:00:51:1a:cd:7d:a6:0b:e0:69:42:db:d0:
         90:db:78:6a:4b:0b:6d:93:6a:2f:3c:95:75:62:a5:87:c8:8b:
         71:e1:a8:b9:92:48:50:f7:bd:08:0a:59:b4:00:51:ad:56:9e:
         c2:c5:06:77:07:ae:12:7b:f7:df:8b:af:9f:8c:22:ad:8c:47:
         c2:d3:56:15:10:eb:87:ed:32:12:7a:8b:9a:c4:7c:16:99:b6:
         7e:ae:fe:d5:c8:08:8d:bc:f8:57:8d:77:18:6f:cd:2b:c4:06:
         a0:35:ed:05:32:7f:33:17:64:38:e7:ea:04:d7:8c:d2:d1:df:
         d6:d4:c6:cf:c9:6b:23:c8:44:b9:f2:54:2e:55:a8:ee:ba:67:
         a7:22:05:fe:b6:2f:29:fe:3e:ba:54:2a:b6:c5:e8:f7:da:d2:
         63:44:97:7c:08:54:95:37:54:cd:bd:e3:c4:61:13:58:4d:b1:
         bf:49:0d:d0:e5:66:43:47:39:f6:97:f9:e2:5b:32:c8:29:db:
         d3:51:46:78:07:fe:a8:3c:9f:71:a9:6b:62:43:8c:f6:9e:fc:
         f2:98:60:72:c3:b5:0f:df:0a:76:85:e2:f1:33:bd:6c:30:8f:
         85:a9:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:23 2024 by rpki-client on console-fra.rpki-client.org